CVE-2026-23109: fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()
In the Linux kernel, the following vulnerability has been resolved:
fs/writeback: skip ASNODATAINTEGRITY mappings in waitsbinodes()
Above the while() loop in waitsbinodes(), we document that we must wait for all pages under writeback for data integrity. Consequently, if a mapping, like fuse, traditionally does not have data integrity semantics, there is no need to wait at all; we can simply skip these inodes.
This restores fuse back to prior behavior where syncs are no-ops. This fixes a user regression where if a system is running a faulty fuse server that does not reply to issued write requests, this causes waitsbinodes() to wait forever.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23109?
The severity of CVE-2026-23109 is categorized as high due to potential data integrity issues in the Linux kernel.
How do I fix CVE-2026-23109?
To fix CVE-2026-23109, you should update to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What systems are affected by CVE-2026-23109?
CVE-2026-23109 affects the Linux kernel and any systems that utilize vulnerable versions of it.
What is the nature of the vulnerability in CVE-2026-23109?
CVE-2026-23109 is a vulnerability that allows skipping of AS_NO_DATA_INTEGRITY mappings, potentially leading to data inconsistencies.
Was CVE-2026-23109 publicly disclosed?
Yes, CVE-2026-23109 was publicly disclosed as part of the Linux kernel security updates.